patch by ghendricks@novell.com r=mkanat a=mkanat

Bug 476594: [SECURITY] Calling srand() at startup time in mod_perl makes the same token be generated over and over
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=justdave, a=mkanat

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=justdave

Bug 472362: [SECURITY] Malicious attachments can change your user settings (user + email prefs, shared searches) - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=LpSolit

Bug 472206: [SECURITY] Bugzilla should optionally not allow the user to view possibly harmful attachments - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat r=justdave a=LpSolit

Bug 466692: [SECURITY] keywords and unused flag types can be deleted by bypassing the token check - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Bug 466748: [SECURITY] Shared/saved searches can be deleted without user confirmation using predictable URL - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Second part of bug 26257: [SECURITY] Bugzilla should prevent malicious webpages from making bugzilla users submit changes to bugs

Bug 26257: [SECURITY] Bugzilla should prevent malicious webpages from making bugzilla users submit changes to bugs - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Bug 38862: [SECURITY] attachments should be at a different hostname - Patch by Byron Jones <bugzilla@glob.com.au> and Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit

SnowyOwl noticed that the word "Bug" appeared raw in the title of some errors I checked in as part of bug 472872.

Patch By Guy Pyrzak <guy.pyrzak@gmail.com> r=mkanat, a=mkanat

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Bug 473201: config.rdf.tmpl flag_type should include group information - Patch by Frank Becker <Frank@Frank-Becker.de> r/a=LpSolit

Bug 471523: Cloning a bug copies the newest visible comment for Newest to Oldest comment order - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Mistakenly checked in previous version of patch. This brings the changes up to date with the
approved patch. dkl

Patch by David Lawrence <dkl@redhat.com> - r/a=mkanat

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=LpSolit

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=pyrzak, a=mkanat

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat

Patch by Max Kanat-Alexander <mkanat@bugzilla.org> r=dkl, a=mkanat

Patch by Dave Lawrence <dkl@redhat.com> - r/a=mkanat

Bug 473006: welcome-admin page is wrong about visible administrative links - Patch by Frédéric Buclin <LpSolit@gmail.com> r=bbaetz a=LpSolit

Bug 405355: Move flatten_group_membership() from User.pm to Group.pm - Patch by arbingersys <arbingersys@gmail.com> r/a=LpSolit

Bug 471461: Incorrect text displayed about groups when a bug is in a product which has only one group defined, with settings Mandatory/Mandatory - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=LpSolit

Bug 471880: More scripts should use the shadow DB instead of the master DB - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=LpSolit

Bug 471613: Replace Bugzilla::Util::is_tainted() by Scalar::Util::tainted() - Patch by Nitish Bezzala <nbezzala@yahoo.com> r/a=LpSolit

Bug 474206: Useless </a> in the component_cc section when deleting a user account - Patch by arbingersys <arbingersys@gmail.com> r/a=LpSolit

Bug 474881: checksetup.pl only creates custom CSS files on the second run - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=mkanat

Patch By Jill Foley <jillpf55@sbcglobal.net> r=mkanat, a=mkanat

Patch By Kip Hampton <khampton@totalcinema.com> r=mkanat, a=mkanat